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(U) MODULE 2 

(-TS//SI//NF) BR and PR/TT Metadata 

(U) This module will enable you to: 

• (TS//SI//NF) Distinguish differences between BR and PR/TT metadata 

• (TS//SI//NF) Recognize restrictions placed on BR and PR/TT metadata storage and retention by the 


BR and PR/TT Bulk Metadata Programs 
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(U) Present learning objectives in the travel 
journal 



-(- TS//S I //N F) (OGC Attorney): During this part of our trip we discuss the BR and PR/TT metadata in greater detail. Specifically, we look at the metadata 
which may be obtained, how bulk metadata is collected under these authorities, and the storage restrictions with which NSA must comply. Other modules 
will address restrictions related to the dissemination and processing of the bulk metadata. 

(U) This module will enable you to: 

• <T S//S I //N F) Distinguish differences between BR and PR/TT metadata 

• (IS//S1//NF) Recognize restrictions placed on BR and PR/TT metadata storage and retention by the BR and PR/TT Bulk Metadata Programs 

(IS//SF/NF) Note that other restrictions will be addressed in other modules. 
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(TSASWNR) (OGC Attorney): Let's take a look at the BR Bulk Metadata Program. As we mentioned in Module 1 , the BR Primary Order pertains specifically 
to telephony metadata which is kept by U.S.-based telecommunications companies as part of their normal business operations. They retain this 
information, in part, so they can send their subscribers a bill every month. 

{ TS//S I // NE) The business records include, for example, originating and terminating telephone numbers, International Mobile Subscriber Identity (IMSI), 
International Mobile Station Equipment Identity (IMEI), trunk identifiers, and telephone calling card numbers. 



(TS//S I //NT) These Business Records 
Include Examples Such As: 

• Originating and terminating telephone 
numbers 

• IMSI 

• IMEI 

• Trunk identifiers 

• Telephone calling card numbers 
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(TS//S I //NF) These Business 
Records Do Not Include: 

• Content of any communication 

• Name, address, or financial 
information of a subscriber or 
customer 



(T6//6 I //NF) (OGC Attorney): As you can imagine, NSA is interested in the same kinds of telephony information for^^^^^^^^and contact chaining 
analysis. Because these business r ecords, also known as call deta ilrecords(CDRs)^re^ U.S. -based telecommunication companies as part 

of their normal business 



permitted to obtain the content of an 



[However, the FISC stipulates that we are not 

of a subscriber or customer. 

idata Program, which allows NSA to collect internet communications metadata [I 
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-fFS/ZStr'/NF) (OGC Attorney): In the case of Internet communications, there are no easily accessible comparable business reco rds that could provide NSA 
with the kind of information in which we are interested. Subscrib ers_do_not-receive_a.bill_based-on_who_the.v_email ^^^^^M. ln_oi.der_to.ac g uire_th.e_b ulk 
metadata for internet communications, the FISC permits NSA to | 

PR/TT metadata and forward it back to NSA for analysis. 

(TS//SI//N F) As we discussed in Module 1 , NSA is not permitted to collect communications content under either of these Orders, so | 
flin such a way as to exclude content. ' 
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(TS//S I //NP ) For example, FISC requirements that affect PR/TT include: 

• Which U.S. -based telecommunications | 

• The specific | 
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( - T S //S I //M F ) (OGC Attorney): The FISC goes into great detail in the Orders about many aspects of the collection to provide reasonable assurance that NSA 
is not overreaching its authority. 

4T S//SI//NF) For example, FISC requirements tha^affec^PR^T inc|ude_ 

♦ Which U.S. -based telecommunications!! 

• The specificjj 

• The types ofl 

♦ Which specific! 
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-(TS/ZSI^/NR) (OGC Attorney): Both Orders mandate that the BR and PR/TT bulk metadata must be stored in repositories within secure networks under 
NSA’s control. The methods for storing the resuits of approved queries of thebulkmetadatawill be explained in Module 4. BR and PR/TT bulk metadata 
may only be stored in authorized and specifically designated repositories,|HBB^H^^| 



~( TS//S I // NF)-The FISC also requires NSA to mark and tag the BR and PR/TT metadata so that software and other control mechanisms may provide 
reasonable assurance that the information is only accessed by authorized personnel who have completed the required training and have the necessary 
credentials. 



^TS//Si//NR) The bulk BR and PR/TT metadata coming into the repositories has an expiration date set by the FISC. NSA does not have the authority to 
maintain the unselected BR and PR/TT metadata indefinitely. The FISC permits NSA to maintain this metadata for 60 months from the date of collection at 
which time it must be destroyed. 
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(U) Knowledge Check 

1 .-(TSf/SF/NF)- Which of the following describe the BR Bulk Metadata Program: 

a) (TS//S1//NF) The BR Order pertains to telephony metadata which is kept by U.S. -based 
telecommunication companies. 

b) (TS#S-t#NF) BR refers to Business Records which is information U.S.-based telecommunications 
companies already have in their possession and use as part of their normal business. 

c) (TSAS4ANF>NSA uses Business RecorcMnformato as terminating telephone numbers, 
IMSI, IMEI and trunk identifiers for contact chaining analysis. 

d) (U) All of the above. " 

2. {TSAS4#NF) Which of the following does not describe the PR/TT Bulk Metadata Program? 

a) (TS//SI//NF) || _ 

b) (TS//SI//NF) NSA only collects limited metadata from the communications of approvecT 
targets. 

c) (TS//SI//NE) NSA collects specific categories of metadata to include the “to,” “from,” “cc,” and 
“bcc” lines of an email. 

d) (U) None of the above. 

3. (TS//S+//NF) Which of the following statements is true? 

a) (TS//SI//NF) Bulk BR and PR/TT metadata may not be kept for longer than 48 months. 

b) (TStfStf/NF) Non-U. S. person metadata may be kept at NSA indefinitely. 

c) {TSV/S+//NF)- The bulk metadata is tagged to provide reasonable assurance that the data is 
only accessed by authorized personnel. 

d) (U) All of the above. 

e) (U) None of the above. 



(U) (OGC Attorney): Let’s check what you remember from this topic! 



ANSWERS: 

Question 1 . (TCZ/SF/NF) Correct! All of the above describe the BR Bulk Metadata Program. 

(TS//SI//NF) Incorrect. The correct answer is d). All of the above describe the BR Bulk Metadata Program. 



Question 2. (TS//SI//f 
of approved targets. 




Lfrom the communications 
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tTS//SW4^> Incorrect. The correct answer is b) becauseiti^OTTRUEthatfoi^hePR/TTBulkMetadataPrograrT 
from the targets. 

Question 3. fFS#St#NF) Right! The bulk metadata is tagged to provide reasonable assurance that the data is only accessed by authorized personnel. 
-(TS#St//NF) Incorrect. The correct answer is c). The bulk metadata is tagged to provide reasonable assurance that the data is only accessed by authorized 
personnel. 
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~(T 0//G I //NF) Distinguish differences between BR and PR/TT Bulk Metadata 
Programs 
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retention by the BR and PR/TT Bulk Metadata Programs 



(U) (OGC Attorney): Now that we have completed this part of our trip, you should be able to: 

• ( TS//S I //NF ) Distinguish differences between BR and PR/TT Bulk Metadata Programs 

• { TS//S I //NF } Recognize restrictions placed on metadata storage and retention by the BR and PR/TT Bulk Metadata Programs 



-{ TS//S I //NF ) During the next portion of our trip, we will meet up with Marvin who will talk to us about the Reasonable Articulable Suspicion (RAS) standard 
and the requirements that must be met in order to query the bulk metadata. 
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